Clear host roles only on successful verification

[1ukastesar]

The clear host roles process is now called right after sending the verification code to the user but before the user enters the code. This is error-prone as it just removes access to the server in the meantime.

Expected behavior

Host roles should be cleared only on/after successful verify (valid code entered).